Flagged newborn domains, Wednesday, November 4, 2026

11,283 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowofflinemediaps.comscore 14echoes lineme
brand in the name “lineme”
Lowok777login.camscore 14· not probed yet
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cam”
Lowokbajilogin.camscore 14· not probed yet
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cam”
Lowokbdlogin.camscore 14· not probed yet
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cam”
Lowoklvlogin.camscore 14· active website
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cam”
Lowoktklogin.camscore 14· active website
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cam”
Lowokwwlogin.camscore 14· not probed yet
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cam”
Lowokwwwlogin.camscore 14· active website
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cam”
Lowokzlogin.camscore 14· not probed yet
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cam”
Lowokzzlogin.camscore 14· active website
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cam”
lure words (login, verify, secure…) “official”free DNS provider “dnsowl.com”
Lowonebayit.comscore 14echoes ebay· active website
brand in the name “ebay”
Lowonlineeducationconsultancy.comscore 14· active website
login form “has_form+login words”
Lowonlybirchservice.clickscore 14· empty page
lure words (login, verify, secure…) “service”TLD with a high abuse rate “click”
Lowopeninternetsystems.comscore 14echoes etsy
brand in the name “etsy”
Loworuzheinii-baron-2-lordfilm.cfdscore 14· active website
many hyphens “3”TLD with a high abuse rate “cfd”
Lowostatsya-v-zhivykh-seriya.hairscore 14· active website
many hyphens “3”TLD with a high abuse rate “hair”
Lowotpusk-na-dvoikh-lordfilm.cfdscore 14· active website
many hyphens “3”TLD with a high abuse rate “cfd”
Lowoz-win.camscore 14· not probed yet
lure words (login, verify, secure…) “win”TLD with a high abuse rate “cam”
Lowoz365-win.camscore 14· active website
lure words (login, verify, secure…) “win”TLD with a high abuse rate “cam”
Lowozwin365login.camscore 14· active website
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cam”
Lowp777login.camscore 14· not probed yet
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cam”
Lowp888login.camscore 14· active website
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cam”
Lowpageverificationrequest.bidscore 14· boilerplate page
lure words (login, verify, secure…) “verification”TLD with a high abuse rate “bid”
Lowpandasecuritychecking.clickscore 14· no web server
lure words (login, verify, secure…) “security”TLD with a high abuse rate “click”
Lowparcelpilot.icuscore 14· no DNS
lure words (login, verify, secure…) “parcel”TLD with a high abuse rate “icu”
Lowparknparcel-aq.topscore 14· blocked the probe
lure words (login, verify, secure…) “parcel”TLD with a high abuse rate “top”
Lowparknparcel-nb.topscore 14· not probed yet
lure words (login, verify, secure…) “parcel”TLD with a high abuse rate “top”
Lowparknparcel-nv.topscore 14· blocked the probe
lure words (login, verify, secure…) “parcel”TLD with a high abuse rate “top”
Lowparknparcel-nx.topscore 14· blocked the probe
lure words (login, verify, secure…) “parcel”TLD with a high abuse rate “top”
Lowparknparcel-nz.topscore 14· not probed yet
lure words (login, verify, secure…) “parcel”TLD with a high abuse rate “top”
Lowparknparcel-pa.topscore 14· not probed yet
lure words (login, verify, secure…) “parcel”TLD with a high abuse rate “top”
Lowparknparcel-ps.topscore 14· not probed yet
lure words (login, verify, secure…) “parcel”TLD with a high abuse rate “top”
Lowparknparcel-qw.topscore 14· not probed yet
lure words (login, verify, secure…) “parcel”TLD with a high abuse rate “top”
Lowparknparcel-ta.topscore 14· blocked the probe
lure words (login, verify, secure…) “parcel”TLD with a high abuse rate “top”
Lowparknparcel-tg.topscore 14· not probed yet
lure words (login, verify, secure…) “parcel”TLD with a high abuse rate “top”
Lowparknparcel-tq.topscore 14· not probed yet
lure words (login, verify, secure…) “parcel”TLD with a high abuse rate “top”
Lowparknparcel-tr.topscore 14· not probed yet
lure words (login, verify, secure…) “parcel”TLD with a high abuse rate “top”
Lowparknparcel-yx.topscore 14· not probed yet
lure words (login, verify, secure…) “parcel”TLD with a high abuse rate “top”
Lowparknparcel-yz.topscore 14· not probed yet
lure words (login, verify, secure…) “parcel”TLD with a high abuse rate “top”
Lowparknparcel-zd.topscore 14· blocked the probe
lure words (login, verify, secure…) “parcel”TLD with a high abuse rate “top”
Lowparknparcel-zs.topscore 14· not probed yet
lure words (login, verify, secure…) “parcel”TLD with a high abuse rate “top”
Lowpatientcareaccess.xyzscore 14· boilerplate page
lure words (login, verify, secure…) “access”TLD with a high abuse rate “xyz”
Lowpatienteraccess.xyzscore 14· excluded
lure words (login, verify, secure…) “access”TLD with a high abuse rate “xyz”
Lowpay-by-trx.topscore 14· active website
lure words (login, verify, secure…) “pay”TLD with a high abuse rate “top”
Lowpayboostmobilebill.comscore 14echoes tmobile· excluded
brand in the name “tmobile”
Lowpaymentexparadise.clickscore 14· active website
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “click”
Lowpaymentfas.clickscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “click”
Lowpaystarlinkwithcrypto.comscore 14echoes starlink
brand in the name “starlink”
Lowpbc888login.camscore 14· active website
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cam”

Same data as JSON: /api/zone/risk?day=2026-11-04&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.